Business customer data schedule

Processing instructions for a Business owner using the evaluation or a paid Pro subscription. This schedule is part of those terms.

Roles and scope

The independent lawn-care business is controller of its customer/site/work information. JMT Property Services Ltd processes it to provide the requested workspace and authorised customer views. We separately control account, security, support and our own billing information under the privacy notice.

Processing includes recording, organising, storing, retrieving, correcting, planning work, sharing chosen customer views, exporting, removing and protecting records. It lasts for the service, requested closure and necessary protected retention. Records may concern customers, occupiers, business owners and workers, and contain contact details, site addresses, lawn profiles, observations, service/product records, plans, visits, work history and private notes. Do not enter special-category or unrelated sensitive information.

Your instructions and security

Your authorised workspace actions and these terms are documented processing instructions. We process on them unless law requires otherwise, and inform you of a legal requirement unless prohibited. Tell support if an instruction needs clarification. We will inform you if we believe an instruction infringes data-protection law.

Authorised personnel must keep the information confidential. We use verified sign-ins, MFA, separate workspace permissions, encrypted transport/storage, limited database roles, protected sessions, removal evidence and recovery controls appropriate to this service. No measure guarantees that an incident cannot occur. You remain responsible for your account security, customer notices and lawful data collection.

Service suppliers and transfers

You authorise AWS for hosting, databases, identity, service-email and operational infrastructure, and Microsoft 365 for support correspondence. Stripe handles subscription payments and related account data separately; customer lawn records are not sent to Stripe for billing. Supplier processing must be covered by appropriate terms and relevant UK transfer safeguards. Core account storage is in London; supplier operations and interface delivery may involve other countries.

We remain responsible for our subprocessors’ relevant obligations. We will give advance information about a material subprocessor change and an opportunity to raise a reasonable data-protection objection through support before it applies. If the issue cannot reasonably be resolved, we will discuss ending the affected processing and returning or removing the relevant data.

Assistance and incidents

Contact support@lawnsprite.co.uk for rights requests, processing instructions or incident reports. We assist reasonably with access, correction, restriction, portability, erasure, security obligations and relevant impact assessments or regulator consultations. We notify the controller without undue delay after becoming aware of a personal-data breach and provide available information needed for its response.

We make relevant compliance information available and allow reasonable, confidential and proportionate audits, including inspections where required, with suitable notice and security arrangements. This does not permit access to another customer’s information or require disclosure that would undermine service security.

Ending processing

Before closure you may export the records or request their return/removal through support. We remove or return customer data as instructed unless law requires retention. Independent customer accounts and records held by another controller remain separate. Protected backup copies expire under their retention controls; current removal evidence must be applied before any restore is exposed. Minimal removal/security and legally necessary records are handled under the privacy notice. This release does not activate a separate statutory pesticide-record retention service.

Download a text copy, or print this page to keep it.